Bug #127
closedWhen loging in from the lost password page, website loads incorrect page
100%
Description
From the lost password page (http://fly/myamiweb/lostpass.php), if click the Login button and enter username and temporary password then click login, the user is directed to the lost password page (lostpass.php) instead of the main index.
Steps:
enter incorrect password.
click lost password.
enter username and have temp password sent to you.
Click on the Login button at top of page.
Enter username and new temp password.
Click login button.
Loads lostpass.php instead of going to main index.
Test with #92
Updated by Eric Hou over 14 years ago
- Assignee changed from Amber Herold to Eric Hou
Updated by Eric Hou over 14 years ago
- Due date set to 02/22/2010
- Status changed from Assigned to In Code Review
- % Done changed from 0 to 100
- Estimated time set to 2.00 h
This is fixed. not only the lost password page. There are totally 4 pages has same problem.
1. login.php
2. lostpass.php
3. register.php
4. confirm.php
Basically this 4 pages are not behind the access control, therefore it cause this problem. I add an extra check for if people already login to the site, and if they try to hit or redirect to these page. The program will redirect to the homepage.
Thanks.
r13052
r13052
Updated by Eric Hou over 14 years ago
- Status changed from In Code Review to In Test
- Assignee changed from Eric Hou to Amber Herold